VULNERABILITY INTELLIGENCE
CVE-2025-14266
EPSS probability0.18%
CISA KEVNot currently listed
Published2025-12-17
Last modified2026-06-17
Description
CSRF in Ercom Cryptobox administration console allows attacker to trigger some actions on behalf of a Cryptobox administrator. The attack requires the administrator to browse a malicious web site or to click a link while he has an open session on the administration console.
Weakness classification
- psirt@thalesgroup.com: CWE-352